Privacy Policy

Effective: June 10, 2026

are we™ is operated by JL Labs. This policy explains what information we collect, how we use it, and how to contact us.

Information we collect

• Phone number — used to create and verify your account with an SMS one-time passcode (OTP) sent through Twilio, and to match you to questions sent to that number.
• First name — provided during sign-up and shown in the app experience.
• Selected recipient information — when you send a question, we store the selected contact's name and phone number with that question. We do not upload your full contact list.
• Questions, answers, and receipts — stored so the app can show the intended question, answer, and matched receipt to the appropriate users.
• Photos you choose to add — uploaded only if you attach a photo to a receipt.
• Push notification token — stored only if you allow notifications, so we can notify you when someone answers.

Contact photos may be read on your device to show an avatar, but are not uploaded. When you choose someone to ask, the app may open your phone's native Messages app with a pre-filled message. That message is sent by you, not by our servers.

How we use information

We use information to operate the app, including account verification, sign-in, matching senders and recipients, displaying questions and answers, creating receipts, sending push notifications you allow, and routing fresh installs to the right question. We do not use your phone number for marketing or promotional messages.

SMS verification

We use Twilio only to send one-time passcodes for account login and verification. We do not use Twilio to send marketing messages, promotional messages, or app invites. Information collected for SMS verification will not be shared with third parties for marketing purposes.

Service providers

We do not sell your personal information. We use service providers to operate the app, including Twilio for SMS verification, Supabase for authentication, database, and storage, and Expo for push notifications if enabled.

Retention and deletion

We keep account information and app content for as long as needed to operate the app, unless you delete it or request deletion. You can request deletion in the app or by emailing [email protected]. We may retain limited information where required for legal, security, fraud prevention, or operational reasons.

Your choices

You can request access to, correction of, or deletion of your personal information by emailing [email protected]. You can also manage push notifications through your device settings.

Updates

We may update this Privacy Policy from time to time. The latest version will always be posted here.

Contact

Questions about this policy? Email us at [email protected].